> ## Documentation Index
> Fetch the complete documentation index at: https://statsig-4b2ff144-mintlify-add-local-eval-country-note-96362.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Redshift Connection

## Overview

To set up connection with Redshift, Statsig needs the following information

* Cluster Endpoint
* A service user Username
* A service user Password
* A staging schema that Statsig can write results to

<Note>
  SHA256 passwords are not currently supported, please utilize MD5 to avoid
  issues.
</Note>

You can find this information in your aws console within your specific cluster, as shown in the image below. (Open image in new tab for a bigger image). The service user should be able to read necessary experiment data, and be able to write to the Statsig staging schema you specify.

<Frame>
  <img src="https://mintcdn.com/statsig-4b2ff144-mintlify-add-local-eval-country-note-96362/E88pmxXxi74FdCik/images/statsig-warehouse-native/connecting-your-warehouse/redshift/187515405-17fa7d90-44e1-422f-87a7-cfde090637ed.png?fit=max&auto=format&n=E88pmxXxi74FdCik&q=85&s=f7377e4e9d95a1d56c7f780e083b9e58" alt="Frame 1" width="1882" height="863" data-path="images/statsig-warehouse-native/connecting-your-warehouse/redshift/187515405-17fa7d90-44e1-422f-87a7-cfde090637ed.png" />
</Frame>

When you save the connection, we will run a series of tiny commands to test permissions -- e.g. creating a temp table, running a select/delete statement on that table, and then dropping that table.

<Note>
  The provided Service Account will require the following attributes:
  `enable_case_sensitive_identifier`, `enable_case_sensitive_super_attribute`.
  If these are not already set, Statsig will set them to TRUE upon setup
  completion.
</Note>

## SSH Tunneling

For Redshift connections, we also allow users to create an SSH tunnel into their Redshift cluster for a more secure and private access to the database.
To enable access, Statsig requires:

* SSH Host
* SSH Port
* SSH User

Statsig will use this information to generate an SSH key. Please add this generated key to your `~/.ssh/authorized_keys` file on your SSH proxy machine to enable SSH tunneling.

### What IP addresses will Statsig access data warehouses from?

[See FAQ](/data-warehouse-ingestion/faq#what-ip-addresses-will-statsig-access-data-warehouses-from)

### Additional Setup for Warehouse Explorer

Warehouse Explorer makes it easy to find and bring data from any table into Statsig for ad-hoc analysis.

To enable the Warehouse Explorer analytics feature, you may need to provide Statsig with additional permission to query the `pg_table_def` metadata. Only schemas that Statsig has read access to will be included in query results. A superuser or admin can grant access to read additional relevant schemas and table metadata in `pg_table_def` by running

```sql theme={null}
  GRANT USAGE ON SCHEMA <RELEVANT_SCHEMA> TO <STATSIG_USER>;
  GRANT SELECT ON ALL TABLES IN SCHEMA <RELEVANT_SCHEMA> TO <STATSIG_USER>;
```

`<STATSIG_USER>` should be the service user username that you provided to Statsig above. `<RELEVANT_SCHEMA>` is the name of the schema you'd like to see included in Warehouse Explorer results